pgsql-bugs(at)postgresql(dot)org writes:
> select table privilege in postgres allows user to create index on the table
Actually, it appears that CREATE INDEX has no permission check at all.
I agree this is a bug. Probably CREATE INDEX should require ownership
permission, the same as ALTER TABLE.
regards, tom lane
In response to
Responses
pgsql-hackers by date
| Next: | From: Bruce Momjian | Date: 2002-01-03 17:08:34 |
| Subject: Re: LWLock contention: I think I understand the problem |
| Previous: | From: pgsql-bugs | Date: 2002-01-03 16:12:05 |
| Subject: Bug #549: select table privilege in postgres allows user to create index on the table |
pgsql-bugs by date
| Next: | From: Tom Lane | Date: 2002-01-03 17:22:26 |
| Subject: Re: Refcursor problem |
| Previous: | From: pgsql-bugs | Date: 2002-01-03 16:12:17 |
| Subject: Bug #549: select table privilege in postgres allows user to create index on the table |